CRII: SaTC: Physical Side-Channel Attacks in Biometric System

与密钥或密码不同，生物特征是永久性的，如果受到损害，很难撤销。由于需要存储受试者的生物特征测量（模板），生物特征系统容易受到用户隐私的侵犯。生物特征参考数据的无保护存储会造成严重的隐私威胁，例如身份盗窃。尽管最近在生物识别系统的安全性方面进行了研究，但对生物识别系统中的物理侧信道攻击的研究仍处于起步阶段，特别是与密码和信息技术相比。虽然侧信道攻击是信息技术安全和密码学领域中的成熟技术，但它们在生物特征系统的背景下得到了充分的研究。该项目的新颖之处在于开发方法，如度量，深度学习算法，协议和生物识别系统中物理侧信道攻击和对策的工具。该项目旨在成为弥合硬件安全和生物识别安全看似孤立的研究领域之间的知识差距的第一步。该项目的更广泛的意义和重要性是提高生物识别系统的安全性和隐私性，防止物理侧信道攻击，其次是保护方案，并参与由美国国家标准与技术研究所领导的正在进行的生物识别评估和标准化工作。通道攻击框架来识别生物识别系统中的漏洞。该项目的成果推进了生物识别系统中的攻击（物理侧通道）和防御机制（特定于域的架构）。根据国际标准化组织和国际电工委员会（ISO/IEC）标准24745评估生物特征保护方案。由于生物识别系统在社会中的广泛应用，该项目可以对身份证、边境身份检查站和医疗保健中的患者认证等广泛活动产生积极影响。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Biometric traits are permanent and difficult to revoke if compromised, unlike keys or passwords. By requiring the storage of biometric trait measurements (templates) for subjects, biometric systems are vulnerable to violation of user privacy. Unprotected storage of biometric reference data poses severe privacy threats such as identity theft. Despite recent research in the security of biometric systems, research on physical side-channel attacks in biometric systems are still nascent, especially when compared to cryptographic and information technologies. Although side-channel attacks are well-developed techniques in the information technology security and cryptography fields, they have been understudied in the context of biometric systems. The project’s novel aspects are developing methodologies such as metrics, deep learning algorithms, protocols, and tools for physical side-channel attacks and countermeasures in biometric systems. This project intends to be a first step towards bridging the knowledge gap between seemingly isolated research field on hardware security and biometric security. The project's broader significance and importance are improvement of security and privacy of biometric systems against physical side channel attacks followed by protection schemes and involvement in the ongoing biometric evaluation and standardization efforts led by the National Institute of Standards and Technology.This project offers insights for future biometric designers on how to efficiently take advantage of physical side-channel attack frameworks to recognize vulnerabilities in biometric systems. The project outcomes advance both attack (physical side-channel) and defense mechanism (domain-specific architecture) in biometric systems. The biometric protection scheme is evaluated according to International Organization for Standardization and the International Electrotechnical Commission (ISO/IEC) Standard 24745. Due to the wide adoption of biometric systems in society, this project can have a positive impact on a broad range of activities involving identity cards, border identity checkpoints, and patient authentication in healthcare.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.